Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/DvLBcorwd0rr6y8c5N5fGfHVsd8.roa
File: DvLBcorwd0rr6y8c5N5fGfHVsd8.roa (raw, json)
Hash identifier: mdZFhbNZwuMySZcNXjwbXyS3d2AUp5KcSo8tJlescHE=
Subject key identifier: 0E:F2:C1:72:8A:F0:77:4A:EB:EB:2F:1C:E4:DE:5F:19:F1:D5:B1:DF
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 0190E429851F79019570ACEA3E1E5436E417
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/DvLBcorwd0rr6y8c5N5fGfHVsd8.roa
Signing time: Wed 24 Jul 2024 09:54:04 +0000
ROA not before: Wed 24 Jul 2024 09:54:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 702
IP address blocks: 45.147.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Oct 2024 16:04:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e4:29:85:1f:79:01:95:70:ac:ea:3e:1e:54:36:e4:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jul 24 09:54:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ef2c1728af0774aebeb2f1ce4de5f19f1d5b1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e5:31:15:5a:9c:3f:9b:5e:c9:fb:f5:d4:60:
08:f5:09:82:14:b2:b6:8d:13:75:9c:52:ab:dd:2a:
a0:09:53:6b:a3:ae:98:df:25:1b:71:e0:28:24:7c:
f0:97:3a:f1:e4:2f:58:a8:7c:69:44:ef:fb:6b:fc:
f0:4e:5e:86:29:12:57:f0:37:52:93:3b:f8:db:16:
09:3a:31:3a:8e:c8:df:0f:84:fc:62:ac:88:92:aa:
2e:08:35:dd:ea:72:ad:16:4a:95:56:ef:d4:8b:52:
33:c2:48:f7:4c:5c:20:2e:9f:28:09:6e:03:70:f2:
e5:25:f8:12:e8:cf:10:e4:e8:0b:ec:ce:d1:44:60:
cf:0a:f9:b7:59:02:f6:06:f7:14:92:fc:1f:c7:b0:
17:c2:ce:fd:e9:42:31:c2:4c:35:f6:4a:fd:a0:9f:
ef:44:da:d1:65:ed:26:61:ea:32:2d:15:7d:41:12:
3e:0c:de:60:1b:0e:0b:c6:5b:1a:a7:db:a5:3f:82:
8c:ff:85:1c:0d:0e:e3:8e:7d:a6:07:e3:2b:a8:ab:
73:32:4f:3d:c7:2c:c5:00:86:b2:45:56:f6:50:a8:
c4:b8:c2:b9:3a:e1:28:5b:3d:4e:ad:83:cd:e6:7c:
4c:32:b8:63:48:64:59:29:c2:ed:96:3d:c5:d2:84:
5a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F2:C1:72:8A:F0:77:4A:EB:EB:2F:1C:E4:DE:5F:19:F1:D5:B1:DF
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/DvLBcorwd0rr6y8c5N5fGfHVsd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.159.0/24
Signature Algorithm: sha256WithRSAEncryption
55:43:34:0c:8f:f2:10:ef:d1:b1:5a:56:24:08:f4:37:30:59:
fb:b8:5d:dd:1c:6d:ab:a2:58:9f:f5:83:b9:ba:a2:f6:79:1c:
b2:e1:5f:a1:68:76:ce:45:e6:a2:16:f3:94:c1:53:71:58:0e:
18:b8:cb:cd:38:b1:79:b5:8a:42:45:aa:2f:23:97:24:5c:9e:
63:80:b8:42:b0:fe:17:8a:40:ae:e6:27:9f:43:da:6e:47:86:
f0:5c:a3:a8:11:74:de:8f:8f:14:ba:bd:c6:c7:06:54:53:0d:
92:4f:3f:04:3e:07:20:cb:8c:66:0e:64:d8:e0:0d:52:5f:82:
45:73:27:0c:53:4c:93:86:e9:be:be:1e:c9:3b:ca:3e:03:f4:
97:e0:d8:92:a5:94:42:b7:a5:26:20:93:09:94:f1:43:e7:07:
8c:b3:83:05:7a:f7:50:70:02:34:63:a1:f7:c5:6f:aa:39:3c:
b1:f0:dd:90:b2:49:cf:0c:be:af:0b:f5:85:96:7f:c5:f9:f6:
38:d0:6c:f1:11:f7:8d:0e:8f:1f:53:e9:79:cf:d8:85:90:9f:
d2:29:db:78:1c:f3:4d:b2:70:50:95:7e:5a:27:99:af:84:c5:
10:91:18:2b:48:3b:50:37:96:c1:cd:ea:e8:3b:dc:89:d3:2b:
1c:f8:fb:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 1 18:42:35 2024 by rpki-client on console-fra.rpki-client.org